Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P0N7WL8PFu0bnsRUYU6EyFjSsoU.roa
File: P0N7WL8PFu0bnsRUYU6EyFjSsoU.roa (raw, json)
Hash identifier: s6W9rRlN4NDoJYK7S0yBt+cc8vxa0Q6NaWQvPxPBTVo=
Subject key identifier: 3F:43:7B:58:BF:0F:16:ED:1B:9E:C4:54:61:4E:84:C8:58:D2:B2:85
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018D4081990E6AC39B138E61F9C56B9FAAE1
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P0N7WL8PFu0bnsRUYU6EyFjSsoU.roa
Signing time: Thu 25 Jan 2024 12:04:11 +0000
ROA not before: Thu 25 Jan 2024 12:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18d:4013:c01e/128 maxlen: 128
2001:67c:64:ffff:0:18d:4081:8e36/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:81:99:0e:6a:c3:9b:13:8e:61:f9:c5:6b:9f:aa:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 25 12:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f437b58bf0f16ed1b9ec454614e84c858d2b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:e8:c0:d2:ac:4f:4f:cc:11:42:03:ab:19:
49:1f:bb:b2:11:f3:75:fc:f9:0d:94:17:bd:05:e9:
57:c7:0b:1a:6e:3c:0c:14:c7:02:f8:2b:cc:90:8a:
f1:8d:d6:42:b1:31:1a:27:70:f2:5f:f3:5c:51:12:
ff:d5:73:d8:ae:ce:61:9f:dd:61:e7:3f:35:1c:bd:
78:49:bf:9c:f8:7d:a2:34:c3:ee:14:df:21:87:76:
97:c4:f9:8a:63:6f:f1:2b:99:d2:b8:8a:c7:bb:85:
7b:06:75:f0:2c:9c:0f:62:78:05:94:be:5d:b2:52:
39:c6:35:bf:b8:82:32:31:2c:83:ec:19:9a:46:fd:
b3:b9:73:2e:14:63:ee:c0:c0:b9:cd:27:ec:d7:43:
f0:a5:f5:3b:5f:bb:12:1b:b6:97:6b:9d:4a:ed:3f:
03:45:3c:0f:92:fb:88:4c:94:24:53:af:5e:79:77:
03:e2:ac:1b:4f:2f:fe:e8:85:47:51:0e:02:c8:9a:
7a:4c:08:97:c6:1b:e4:0f:35:c6:0a:a9:20:4a:21:
e2:23:b9:2c:3c:f6:f8:e6:01:bf:97:d9:3d:19:26:
94:01:8c:ac:bd:5f:8d:52:79:48:5d:c3:d5:9f:19:
2c:43:10:01:28:2f:a4:67:f3:39:40:07:75:78:9c:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:43:7B:58:BF:0F:16:ED:1B:9E:C4:54:61:4E:84:C8:58:D2:B2:85
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/P0N7WL8PFu0bnsRUYU6EyFjSsoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:4b:61:e6:aa:51:b1:86:3e:de:df:ab:bb:2e:a7:ae:21:ff:
52:58:cb:08:3f:5f:92:d7:f9:b0:cb:e7:53:98:a5:f9:95:1e:
8b:95:b0:8c:46:a8:b7:3b:8e:7d:d3:f1:72:89:17:99:97:6c:
5d:6f:3d:97:fc:25:56:67:78:1a:c7:cf:52:fe:45:73:e1:4e:
bd:09:a8:18:01:29:9f:56:a3:78:45:1e:e0:da:58:5a:6e:2e:
45:0c:bf:26:e9:a2:92:e3:49:07:bb:4c:d8:5b:51:25:49:a5:
aa:fc:45:40:a5:2e:2e:da:b5:55:e3:6c:fe:5b:f6:5b:5b:a6:
65:39:f3:67:bc:96:17:f2:75:60:1b:c4:ca:9e:6f:7f:f3:ab:
1d:e1:5c:cd:bf:7a:51:48:59:4d:6b:b1:22:ba:d0:c5:fa:1e:
88:ee:72:f4:75:0e:86:f7:23:49:9e:63:81:77:14:18:e0:eb:
28:99:04:7a:b1:67:85:06:5b:39:e6:2d:4e:f9:ab:6b:a4:e1:
02:6c:05:5d:c8:78:33:34:79:20:5b:74:35:71:5c:e4:9a:d2:
7c:68:c7:e2:5b:4d:cd:0a:6b:0f:cd:2b:11:af:db:c7:01:04:
0b:ef:61:fb:87:d8:e6:d4:18:f5:d0:d0:46:5d:08:40:90:c1:
9d:d7:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:57 2025 by rpki-client